Hi, I noticed that I am receiving sometimes web pages with quite annoying latency, seeing resolving hosts etc. I checked Zywall and found that there is NAT table is full error message, but in the same time there is only for example 900 sessions opened.
Yesterday there were 3000 sessions opene where only single computer (server) was running on the network.
Can you advice how I can detect to which computer those sessions/entries in NAT table belongs?
many thanks
Vladimir
↧
Zywall 2 plus NAT table is full
↧
ES3500 24HP issues
I have a couple of ES3500 25HP series switches. They are in two different networks. One has firmware V4.00(AADE.3) | 12/23/2013. The other is older. I cannot log into it at the moment to check. Anyway, I have these switches on a VoIP network with Aastra phones and an Asterisk based server. In one location I have an Asus RTN16 router running DDWRT-2.4 mini, connected to a Cable connection. The cable testing at the modem is approx 60 / 4. Running the same test at the switch is 4 / .5 The other location has a Sonicwall connected to a cable connection at 100 / 10. The test behind the Zyxel is the same. I have DSCP set to 0 for 24 & 46 in order to provide QoS for the phone system. There is little else configured except PoE on as needed for the ports. Can anyone comment as to why I would see this much difference in the testing I did for internet speeds? I have been having call quality issues at both these sites and now I am starting to doubt these switches.
Thanks for any ideas.
↧
↧
Tracert IPv6 in IPv4 tunnel settings?
I have an IPv6 in IPv4 tunnel from Hurricane Electric on my USG50. Everything I have tried works except tracert. Do I need to change something in the USG50?
C:\Users\janderso>ping google.com Pinging google.com [2607:f8b0:400d:c06::8b] with 32 bytes of data:Reply from 2607:f8b0:400d:c06::8b: time=81msReply from 2607:f8b0:400d:c06::8b: time=82msReply from 2607:f8b0:400d:c06::8b: time=82msReply from 2607:f8b0:400d:c06::8b: time=150ms Ping statistics for 2607:f8b0:400d:c06::8b: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 81ms, Maximum = 150ms, Average = 98ms C:\Users\janderso>nslookup google.comServer: 2ns1.home.testAddress: 2001:470:abcd:1::251 Non-authoritative answer:Name: google.comAddresses: 2607:f8b0:400d:c06::8b 64.233.171.102 64.233.171.138 64.233.171.100 64.233.171.113 64.233.171.101 64.233.171.139 C:\Users\janderso>tracert google.com Tracing route to google.com [2607:f8b0:400d:c06::8b]over a maximum of 30 hops: 1 3 ms 3 ms 4 ms 2001:470:abcd:1::1 2 * * * Request timed out. 3 * * * Request timed out. 4 * * * Request timed out. 5 * * * Request timed out. 6 * * * Request timed out. 7 * * * Request timed out. 8 * * * Request timed out. 9 * * * Request timed out. 10 * * * Request timed out. 11 * * * Request timed out. 12 * * * Request timed out. 13 * * * Request timed out. 14 93 ms 81 ms 81 ms qh-in-x8b.1e100.net [2607:f8b0:400d:c06::8b] Trace complete. C:\Users\janderso>
--
Jim Anderson
↧
BWM on non-wan port
Hi Guys,
I'm playing around for the first time with bandwith management on a Zyxel USG 20, firmware 3.30, and it looks like it works when, in my bandwith mangement rule, the outgoing interface is the wan port.
I have a 2nd modem connected to it, and if the outgoing interface is also lan1, no bandwith limitation will be applied.
This might be a stupid question, but could I configure the modem on the DMZ interface and have a bandwith rule on that interface ? Or do I have to invest and buy a router with two wan interfaces ?
Thank you for your help
↧
Can't access backup modem on WAN 2 when local
Help!
I have a backup modem that I have connected to WAN 2 (it's a standalone cellular modem with an ethernet port). The WAN trunk is set to spillover, with WAN 2 set to passive. The modem has a public IP for configuration that I can browse to from the internet from everywhere EXCEPT a computer on my LAN. Disabling the firewall doesn't fix this.
Any help would be greatly appreciated.
Thanks.
↧
↧
L2TP VPN over Dual WAN
Anyone know if zywall can set L2TP VPN over 2 wan if one of the wan is down? I can only choose one configuration from VPN connection profile on the L2TP VPN setting.
↧
Groupon and Zyxel CDA30360
I saw Groupon mentioned on the Zyxel America website. Before I saw that I ordered a Zyxel Cablemodem from a groupon deal as it was way below other prices and was the cheapest 8x4 docsis modem on the market. 44.99 plus 3.99 tax.
Was getting charged a Time a Warner Cable lease fee. Just concerned if Groupon honors the deal and ships the right modem in new condition in a timely fashion as there seems to be a lot of complaints which I noticed after I ordered it.
↧
Zywall 70 32MB
Has anyone upgraded the RAM chip from 32 MB to 64 MB in a Zywall 70 and been able to make it work on Zynos 4 ? I have the facilities to do this but not sure if anything else is different. Thanks
↧
Zywall 110 has new 3.20 FW
ftp://ftp.zyxel.com/ZyWALL_110/firmware/
↧
↧
Zywall USG100 - IPsec VPN can not communicatie with LAN
Hello,
I have build an IPSEC VPN on my Zywall USG100, this VPN is used for my laptops and Android phone.
To configure this VPN i followed this youtube video:
https://www.youtube.com/watch?v=2UN1z9l0vfs
The setup let me surf on the internet trough the VPN but i can't access my LAN subnet. I want to access my shares that are on a NAS device in the LAN subnet when connected to the VPN.
LAN Subnet = 192.168.1.X
IPSec VPN = 192.168.10.X
The Zywall has no special configuration so far, most of the rules are the default rules.
The Routing policy:
http://i61.tinypic.com/rcj1pc.png
The Firewall rules:
http://i61.tinypic.com/2i78x8k.png
I googled for some answers but i just can't find the things i need to get this working. Can somebody help me with this problem?
Thanks in advance
↧
usg50 L2TP setup broke ATT Microcell
I finally got L2TP working, but now my microcell can't get his tunnel to ATT
I've tried a few policy routes, but i cant get these SPI events resolved ... the microcell will connect for about 15 minutes, then when the NATT comes in IPsec drops the packets because it doesn't have a rule
any advice ??
similar to this post :
http://www.dslreports.com/forum/r27564838-USG20-L2TP-Win7-Client-No-LAN-Access-AT-T-Microcell
↧
Problems upgrading to 3.30 patch 5
I have a USG20 that was running 3.30 patch 4. Tried to upgrade to patch 5. Browser has been in "Firmware upload is in progress..." for the past 30 minutes. Web interface of the router is no longer responsive (using another window).
Connected console cable and found this. Any help appreciated. I can't login usig the console, the password prompt never show up.
Welcome to ZyWALL USG 20
Username: admin
ALERT!!
2014-06-10 21:34:10
system cpu usage: 98% [sys 76%, user 0%, irq 17%, softirq 5%]
========================================================
Date: 1402450631, app_wd invoked oom-killer: gfp_mask=0xd0, order=2, oomkilladj=0
Call Trace:
[] dump_stack+0x8/0x48
[] oom_kill_process+0x1d8/0x2d0
[] out_of_memory+0x1c0/0x2c8
[] __alloc_pages+0x2a4/0x3e0
[] cache_alloc_refill+0x368/0x700
[] kmem_cache_alloc+0x90/0xb8
[] copy_process+0xc4/0x1138
[] do_fork+0x7c/0x2c0
[] _sys_fork+0x24/0x38
[] handle_sysn32+0x54/0x94
Mem-info:
DMA per-cpu:
CPU 0: hi: 90, btch: 15 usd: 0
Active:25768 inactive:9894 dirty:0 writeback:0 unstable:0
free:1278 slab:8036 mapped:0 pagetables:735 bounce:0
DMA free:5112kB min:1968kB low:2460kB high:2952kB active:103072kB inactive:39576kB present:242400kB pages_scanned:0 all_unreclaimable? no
lowmem_reserve[]: 0 0 0
DMA: 1042*4kB 78*8kB 14*16kB 1*32kB 1*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5112kB
16582 total pagecache pages
Swap cache: add 0, delete 0, find 0/0
Free swap = 0kB
Total swap = 0kB
Free swap: 0kB
64512 pages of RAM
0 pages of HIGHMEM
1638 reserved pages
1067 pages shared
0 pages swap cached
[ pid ] uid tgid total_vm rss cpu oom_adj name
[ 1] 0 1 52 7 0 0 init
[ 812] 0 812 2115 25 0 0 zylogd
[ 816] 0 816 302 40 0 0 syslog-ng
[ 817] 0 817 1932 22 0 0 zylogger
[ 820] 0 820 2173 25 0 0 zwd
[ 823] 0 823 4611 82 0 0 uamd
[ 825] 0 825 4611 82 0 0 uamd
[ 827] 0 827 4611 82 0 0 uamd
[ 831] 0 831 6448 240 0 0 appd
[ 832] 0 832 6448 240 0 0 appd
[ 835] 0 835 6448 240 0 0 appd
[ 836] 0 836 6448 240 0 0 appd
[ 838] 0 838 6448 240 0 0 appd
[ 869] 0 869 676 17 0 0 myzyxel_registe
[ 871] 0 871 676 17 0 0 myzyxel_checkd
[ 930] 0 930 937 17 0 0 link_updown
[ 933] 0 933 2648 29 0 0 celld
[ 934] 0 934 2664 30 0 0 celld
[ 935] 0 935 690 22 0 0 zyiptcrouted
[ 938] 0 938 1224 21 0 0 generic_timer
[ 945] 0 945 5653 60 0 0 policyd
[ 960] 0 960 5653 60 0 0 policyd
[ 962] 0 962 5653 60 0 0 policyd
[ 966] 0 966 5653 60 0 0 policyd
[ 968] 0 968 5653 60 0 0 policyd
[ 969] 0 969 5653 60 0 0 policyd
[ 972] 0 972 5653 60 0 0 policyd
[ 975] 0 975 696 18 0 0 tpd
[ 977] 0 977 3881 57 0 0 firewalld
[ 982] 0 982 3363 35 0 0 sessionlimitd
[ 983] 0 983 5381 63 0 0 ddns_had
[ 986] 0 986 2519 32 0 0 signal_wrapper
[ 1013] 0 1013 7952 579 0 0 pro
[ 1052] 0 1052 3363 35 0 0 sessionlimitd
[ 1055] 0 1055 3363 35 0 0 sessionlimitd
[ 1059] 0 1059 3363 35 0 0 sessionlimitd
[ 1064] 0 1064 7952 579 0 0 pro
[ 1066] 0 1066 7952 579 0 0 pro
[ 1071] 0 1071 7952 579 0 0 pro
[ 1216] 0 1216 3881 57 0 0 firewalld
[ 1217] 0 1217 3881 57 0 0 firewalld
[ 1218] 0 1218 3881 57 0 0 firewalld
[ 1219] 0 1219 3881 57 0 0 firewalld
[ 1333] 0 1333 4983 268 0 0 sshipsecpm
[ 1359] 0 1359 5539 172 0 0 asd
[ 1360] 0 1360 940 20 0 0 pcap_monitor
[ 1366] 0 1366 2263 26 0 0 vsd
[ 1369] 0 1369 647 15 0 0 zyshd_wd
[ 1372] 0 1372 13639 2576 0 0 zyshd
[ 1528] 0 1528 1767 27 0 0 xinetd
[ 2048] 0 2048 676 15 0 0 resd
[ 2052] 0 2052 8578 232 0 0 contfltd
[ 2053] 0 2053 8578 232 0 0 contfltd
[ 2058] 0 2058 8578 232 0 0 contfltd
[ 2062] 0 2062 8578 232 0 0 contfltd
[ 2073] 0 2073 4053 38 0 0 fauthd
[ 2074] 0 2074 4053 38 0 0 fauthd
[ 2077] 0 2077 4053 38 0 0 fauthd
[ 2084] 0 2084 4053 38 0 0 fauthd
[ 2088] 0 2088 4053 38 0 0 fauthd
[ 2091] 0 2091 693 16 0 0 wdtd
[ 2093] 0 2093 14458 93 0 0 tr069ta
[ 2102] 0 2102 2001 26 0 0 ipmonitord
[ 2104] 0 2104 14458 93 0 0 tr069ta
[ 2105] 0 2105 14458 93 0 0 tr069ta
[ 2106] 0 2106 14458 93 0 0 tr069ta
[ 2107] 0 2107 14458 93 0 0 tr069ta
[ 2108] 0 2108 14458 93 0 0 tr069ta
[ 2109] 0 2109 14458 93 0 0 tr069ta
[ 2110] 0 2110 14458 93 0 0 tr069ta
[ 2111] 0 2111 14458 93 0 0 tr069ta
[ 2112] 0 2112 14458 93 0 0 tr069ta
[ 2113] 0 2113 14458 93 0 0 tr069ta
[ 2114] 0 2114 14458 93 0 0 tr069ta
[ 2116] 0 2116 14458 93 0 0 tr069ta
[ 2117] 0 2117 14458 93 0 0 tr069ta
[ 2118] 0 2118 14458 93 0 0 tr069ta
[ 2119] 0 2119 14458 93 0 0 tr069ta
[ 2120] 0 2120 14458 93 0 0 tr069ta
[ 2121] 0 2121 14458 93 0 0 tr069ta
[ 2123] 0 2123 14458 93 0 0 tr069ta
[ 2124] 0 2124 14458 93 0 0 tr069ta
[ 2125] 0 2125 14458 93 0 0 tr069ta
[ 2126] 0 2126 14458 93 0 0 tr069ta
[ 2154] 0 2154 12524 390 0 0 radiusd
[ 2155] 0 2155 12524 390 0 0 radiusd
[ 2156] 0 2156 12524 390 0 0 radiusd
[ 2157] 0 2157 12524 390 0 0 radiusd
[ 2158] 0 2158 12524 390 0 0 radiusd
[ 2159] 0 2159 12524 390 0 0 radiusd
[ 2160] 0 2160 12524 390 0 0 radiusd
[ 2918] 0 2918 8578 232 0 0 contfltd
[ 3131] 0 3131 10427 349 0 0 httpd
[ 3141] 0 3141 4739 75 0 0 sshd
[ 3197] 0 3197 1962 25 0 0 classify
[ 3201] 0 3201 3336 54 0 0 app_wd
[ 3203] 0 3203 3311 35 0 0 app_wd_cf
[ 3205] 0 3205 2254 25 0 0 diagnosed
[ 3206] 0 3206 648 15 0 0 ccd
[ 3229] 0 3229 2256 25 0 0 tachgdaemon
[ 3232] 0 3232 2174 25 0 0 usd
[ 3387] 0 3387 12841 621 0 0 ctipd.bin
[ 3399] 0 3387 12841 621 0 0 ctipd.bin
[ 3400] 0 3387 12841 621 0 0 ctipd.bin
[ 3640] 0 3387 12841 621 0 0 ctipd.bin
[ 3641] 0 3387 12841 621 0 0 ctipd.bin
[ 3642] 0 3387 12841 621 0 0 ctipd.bin
[ 3643] 0 3387 12841 621 0 0 ctipd.bin
[ 3644] 0 3387 12841 621 0 0 ctipd.bin
[ 3433] 0 3433 4946 50 0 0 login
[32385] 0 32385 2814 38 0 0 cron
[29318] 0 29318 3422 48 0 0 pppd
[32425] 99 32425 10463 398 0 0 httpd
[ 6549] 2 6549 2385 71 0 0 zebra
[ 6554] 2 6554 2387 90 0 0 ripd
[ 6560] 2 6560 2816 140 0 0 ospfd
[11434] 0 11434 3969 190 0 0 dhcpd
[11466] 0 11466 1472 170 0 0 named
[11508] 0 11508 1010 28 0 0 dhcp6c
[11615] 0 11615 1008 25 0 0 dhcp6s
[11620] 0 11620 1008 25 0 0 dhcp6s
[11627] 0 11627 1008 27 0 0 dhcp6s
[11632] 0 11632 971 21 0 0 radvd
[12032] 0 12032 10189 196 0 0 zysh
[12033] 0 12033 3944 45 0 0 cron
[12037] 0 12037 4490 56 0 0 periodically
[12040] 0 12040 1425 43 0 0 sh
[12046] 0 12046 12121 10874 0 0 host
[12050] 0 12050 10190 198 0 0 zysh
[12051] 99 12051 10427 353 0 0 httpd
[12052] 0 12052 10427 349 0 0 httpd
[12053] 0 12053 241 5 0 0 sh
[12055] 0 12055 2798 37 0 0 cron
Date 1402450632, Out of memory: kill process 12051 (httpd) score 10427 or a child
Date: 1402450632, Killed process 12051 (httpd)
Login timed out after 60 seconds
Welcome to ZyWALL USG 20
Username:
↧
Zyxel change syslog port
Here's the CLI command to change the syslog transmission port for Zyxel Zywall/USG routers. You can set the transmission port individually for each of the 4 syslogs. (I had to contact support as I couldn't find this command in the CLI documentation)
Router(config)# logging syslog port
↧
↧
Change Vantage Reports syslog receiving port
Any idea on how to change the syslog port that the Zyxel Vantage Reports listens on? I am wanting to send USG syslogs to Vantage Reports on port 513 (I am successfully sending syslogs to this port). I'm not sure how to configure Vantage reports to listen on this port. Tier 1 tech support is elevating my request now but I thought I'd check with the community.
↧
Windows L2TP 60min disconnect
If anyone is interested, looks like MSFT fixed the Windows L2TP client IPSec re-keying issue.
I haven't had time to test it yet, but noticed THIS hotfix for Win8, and THIS update rollup for Win8.1 which includes the hotfix.
↧
USG 20 choking on 100/4 profile
When I bought the router I had no idea I would ever be on such a package (100/4, Charter just did a free upgrade) so I wasn't concerned about the throughput. I'm getting around 75~85Mbs down now with the firewall on. Without I'm getting the expected 100Mbs down. I just upgraded the firmware so I have that covered. I am using the default firewall rules, no VPN. Is this about right???
If I was to replace it, what would do me and give a little room for growth. Or should the '20 handle these speeds and need to adjust a setting or two??? The specs say 150Mbs throughput. Is that another way to say it's good for 75/75????
↧
USG 20 Not Forwarding Ports
I've got a USG 20 that's developed an interesting issue. Our setup was working fine until about this time last week.
I will state that this is a retail location and I have not been to the site. As far as I know, no changes were made to the Comcast modem nor the USG 20 when the problem started. The issue appeared to fix itself shortly for a couple days, but then started up again.
We have a Comcast SMC8014 that we have placed the USG 20 into the DMZ. Whenever we attempt to connect to a service from outside the LAN, the port is not forwarded to the device, but rather doesn't go past the USG 20. We have removed the WAN-to-ZyWall rule in the firewall config, but can still access the configuration by going to https:// (we have disabled HTTP config, but allowed HTTPS config; config is only allowed from LAN1 as allowed by firewall rules). It seems as though the USG 20 has decided the WAN is actually a LAN interface somehow.
The site can access the internet fine, and is having no issues connecting within the LAN to other LAN-based computers (at least for LAN1). The DMZ on the USG 20 hosts open WiFi for customer use, and the firewall does not allow for DMZ-to-ZyWall access.
I even went as far as to completely replace the USG 20 (we keep some spares on hand to ensure minimal downtime) and used a saved configuration from another store (that the same setup is working fine at) to reload the settings on the new USG 20 box.
I'm at my wit's end with this, do you guys have any ideas?
↧
↧
Missing Dashboard info-What plugin am I missing?
Hi all,
I am an XP holdout that has recently migrated to Linux (Mint since I am a noob).
I noticed that when I log in the dashboard, I am missing info. I am sure its a plug-in, but which one?
Oddly enough, all the pretty pictures are there-what I am specifically missing is some text: I don't see uptime, firmware version, etc. The "Widget" is present, but there is no info underneath it.
This is using Firefox 28. I used Firefox back when I was using XP and everything showed fine.
Thanks!
-Alan
↧
Zywall USG 200 Client Cant see Internal websites
Remote Access (Server Role) VPN is set up and working
Clients can Ping
Clients can access Internet
Clients can access Local Shares
Clients get Local DNS
But when I try to access internal IIS websites the sites do not load or half load then drop I see this in the logs 192.168.1.250 is IIS Server and 192.168.200.1 is L2TP IPSEC Client
error
IPSec
SPI: 0x0 (0) SEQ: 0x0 (0) No rule found, Dropping TCP packet [count=11]
192.168.1.250:80
192.168.200.1:57588
ipsec
↧
BRG-35503 Modem
Would any one reading this post know the IP Address for the BRG-35503 Modem status page?
Your assistance will be appreciated.
↧
